ACL applications

ACL filtering is applied to IPv4 traffic as follows:

Static port ACL

Any inbound IPv4 traffic on that port.

Dynamic port ACL

On a port having an ACL assigned by a RADIUS server to filter an authenticated client’s traffic, filters inbound IPv4 and IPv6 traffic from that client.

For information on RADIUS-assigned ACLs, see RADIUS Services Support on Aruba Switches.


On a VLAN configured with a VACL, inbound IP traffic, regardless of whether it is switched or routed. On a multinetted VLAN, this includes inbound IPv4 traffic from any subnet.